This is an automated email from the ASF dual-hosted git repository.
papegaaij pushed a change to branch wicket-9.x
in repository https://gitbox.apache.org/repos/asf/wicket.git
from 73debcf5ed WICKET-7107 move CPS headers writing to WebPage (#1503)
new 86d3d19327 Document the security model and page store crypter trust
new 3aa7745c08 Document cross-origin isolation of listener invocations
new 6279ab9b25 Update security reporting instructions in SECURITY.md
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
SECURITY.md | 210 +++++++++++++++++++++
.../wicket/pageStore/crypt/DefaultCrypter.java | 16 +-
.../wicket/pageStore/crypt/GCMSIVCrypter.java | 17 +-
.../apache/wicket/pageStore/crypt/ICrypter.java | 13 ++
.../apache/wicket/protocol/https/HttpsMapper.java | 18 +-
.../org/apache/wicket/settings/StoreSettings.java | 9 +-
.../src/main/asciidoc/internals/pagestoring.adoc | 19 +-
.../src/main/asciidoc/security/security_3.adoc | 15 ++
8 files changed, 308 insertions(+), 9 deletions(-)
create mode 100644 SECURITY.md
